During incident response, your SOC confirms that a legitimate marketing vendor's domain was mistakenly flagged and its emails are being blocked by Microsoft Defender for Office 365, disrupting business communication. You have already validated the sender is safe. You need to ensure future messages from this specific sending domain are delivered without repeatedly triggering the same block, using the recommended Defender XDR mechanism. Which action should you take?